News for hackers. Stuff that matters.

A comment on EC2's most dangerous feature. Parent comment

Re:EC2's most dangerous feature by hueving on Sunday October 09, 2016 @05:19PM (#12673531)
It's borderline a privilege escalation vulnerability. The default behavior is that an unprivileged user on the system with network access can get access to an instance's credentials that can be used to perform administrative functions.

Like Colin pointed out in the blog post, this completely subverts the permissions model in modern operating systems.

[ Parent | on HN ]
Re:EC2's most dangerous feature by subway on Sunday October 09, 2016 @07:36PM (#12674164)
No, it is not a vulnerability. Misunderstanding of this functionality can result in developer introducing a vulnerability, but this is a well described, well defined feature.

Calling this a vulnerability is akin to calling the existence of `rm` a vulnerability because it can delete files.

[ Parent | on HN ]